system logs

[jdprovine]

Don't seem to be updating

[jdprovine]

Well actually they don't seem to be updating on my primary palo alto in the GUI but seem to be working fine on the secondary

[Mick_Ball]

Hmmm... are they active passive or active active... could they have failed over without you realising. And you have lost a HA data link?

perhaps HA2.

[BPry]

@jdprovine,

I'm going to go with @Mick_Ball's suggestion that they probably failed over. From prior conversations I think you use active/passive; so I'm guessing that Mick is right and the member that is usually active has in fact failed traffic over to the peer. 

[Mick_Ball]

Perhaps @jdprovine you could confirm if this is the system or traffic logs...

the discussion mentions system.....

if it is the system log then cancel my idea on the H2 data link as the system log should still contain local stuff to that device..

or... do you use a generic login for administration and you or someone else has left a null return filter in the search bar.

i hate it when that happens, annoying thing is... its usually me...

[jdprovine · Accepted solution]

@Mick_Ball @BPry

I would have responded back yesterday but I kept getting a saml error when trying to login.  The fix was to restatrt the management server, not sure what happened but everything was working as it should it just wasn't being reported inthe system logs correctly, but it was working on our passive firewall weird